Emby kayıtları
emby üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %10
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %20
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-290 Authentication Bypass by Spoofing1
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
65Bu hafta | CVE-2020-26948Silahlaştırılmış | Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.emby · emby · CWE-918 | Kritik9,8 | — | %87,2 | 10 Eki 2020 |
39İzleyin | CVE-2021-25827İstismar yok | Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.emby · emby · CWE-290 | Kritik9,8 | — | %1,5 | 28 Haz 2023 |
37İzleyin | CVE-2023-33193Kavram kanıtı | Emby Server Proxy Header Spoofing Vulnerabilityemby · emby.releases · CWE-444 | Kritik9,1 | — | %1,7 | 30 May 2023 |
37İzleyin | CVE-2025-64113İstismar yok | Emby Server allows attackers to gain administrative server access without preconditionsemby · emby · CWE-640 | Kritik9,3 | — | %0,6 | 9 Ara 2025 |
34İzleyin | CVE-2021-32833İstismar yok | Unauthenticated file read in Emby Serveremby · emby.releases · CWE-552 | Yüksek8,6 | — | %1,3 | 8 Eyl 2021 |
33İzleyin | CVE-2025-64325İstismar yok | Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboardemby · emby · CWE-79 | Yüksek8,4 | — | %0,4 | 18 Kas 2025 |
24İzleyin | CVE-2023-4167İstismar yok | Media Browser Emby Server cross site scriptingemby · emby.releases · CWE-79 | Orta6,1 | — | %0,6 | 5 Ağu 2023 |
24İzleyin | CVE-2021-25828İstismar yok | Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web.emby · emby · CWE-79 | Orta6,1 | — | %0,5 | 28 Haz 2023 |
24İzleyin | CVE-2022-36223İstismar yok | In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token andemby · emby · CWE-79 | Orta6,1 | — | %0,4 | 16 Ara 2022 |
24İzleyin | CVE-2024-30931İstismar yok | Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to escalate privileges viaCWE-79 | Orta6,1 | — | %0,3 | 25 Haz 2024 |
- CVE-2020-2694865Bu hafta
Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.
KritikCVSS 9,8SilahlaştırılmışEPSS %87emby · emby10 Eki 2020
- CVE-2021-2582739İzleyin
Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.
KritikCVSS 9,8İstismar yokEPSS %1emby · emby28 Haz 2023
- CVE-2023-3319337İzleyin
Emby Server Proxy Header Spoofing Vulnerability
KritikCVSS 9,1Kavram kanıtıEPSS %2emby · emby.releases30 May 2023
- CVE-2025-6411337İzleyin
Emby Server allows attackers to gain administrative server access without preconditions
KritikCVSS 9,3İstismar yokEPSS %1emby · emby9 Ara 2025
- CVE-2021-3283334İzleyin
Unauthenticated file read in Emby Server
YüksekCVSS 8,6İstismar yokEPSS %1emby · emby.releases8 Eyl 2021
- CVE-2025-6432533İzleyin
Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard
YüksekCVSS 8,4İstismar yokEPSS %0emby · emby18 Kas 2025
- CVE-2023-416724İzleyin
Media Browser Emby Server cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1emby · emby.releases5 Ağu 2023
- CVE-2021-2582824İzleyin
Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web.
OrtaCVSS 6,1İstismar yokEPSS %1emby · emby28 Haz 2023
- CVE-2022-3622324İzleyin
In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token and
OrtaCVSS 6,1İstismar yokEPSS %0emby · emby16 Ara 2022
- CVE-2024-3093124İzleyin
Stored Cross Site Scripting vulnerability in Emby Media Server Emby Media Server 4.8.3.0 allows a remote attacker to escalate privileges via
OrtaCVSS 6,1İstismar yokEPSS %025 Haz 2024